Skip to main content
Question

Encrypting user password in linux ODBC DSN and JDBC url

  • Sep 13, 2019 12:08 PM UTC
  • 2 replies
  • 19 views

chaima
Forum|alt.badge.img+2
  • Participating Frequently

Hello,
I have a customer who wants to know whether or not there is a way to use an encrypted user password instead of plain text in odbc.ini or jdbc url on linux platform .
From the documentation it looks like it's possible for windows odbc clients but nothing about linux or jdbc..
Any idea?
Thanks
Chaima

2 replies

skeswani
Forum|alt.badge.img
  • Participating Frequently
  • Sep 13, 2019 1:46 PM UTC

The reason its not done, is that is just moves the problem elsewhere, and add complexity with no real benefit.
i.e. Where are they planning to store the password/key that they will use encrypt the password?
The right way is to change the permissions on the odbc.ini file to "r--" and just protect the user account with whatever password policy and rotation requirements they have.


chaima
Forum|alt.badge.img+2
  • Author
  • Participating Frequently
  • Sep 16, 2019 8:41 AM UTC

Thank you @skeswani , they were also wondering if we provide a way to encrypt the password too. I guess the answer is no too, right?